Yoinkly Privacy Policy (Waitlist)

Effective date: October 12, 2026

This policy explains what we collect when you visit the Yoinkly website or join the Yoinkly waitlist, why we collect it, and the choices you have. It covers the website and waitlist only. The Yoinkly app will have its own updated policy before it launches.

1. Who we are

Yoinkly is not yet incorporated. It is operated as Yoinkly in Ontario, Canada.

• Mailing address: mailing address available on request
• Privacy contact: Yoinklyofficial@gmail.com

Yoinkly's Privacy Officer is responsible for personal information under our control and is our privacy contact.

2. What we collect

What you give us on the waitlist form:

• Email address (required)
• The radar or category you're joining, e.g. sports cards, TCG, electronics or sneakers (set by the page you sign up on)
• Optional: the specific things within that category you want to hear about (sub-interests)
• Optional: other radars or categories you're interested in
• Optional: "What do you collect?" (categories you pick) and "Anything specific?" (a short free-text answer)
• Your country (required) and, if you choose to get texts, your mobile number, plus a record of your SMS consent: the time, page, wording shown, IP address and your YES reply.
• Optional: how you heard about us

Your consent record:

• The date and time you agreed to receive emails
• The exact consent wording you saw, and the page you signed up on
• When you confirmed your email address
• When you unsubscribed, if you do

Collected automatically:

• How you found us: the referring website and campaign tags in the link you clicked (for example "utm_source"), plus any creator or referral code ("ref").
• Basic usage data about how you use the site (pages viewed, form steps, errors), collected through our analytics provider. We don't send your email address to our analytics provider.
• Security data. Our spam-protection service (Cloudflare Turnstile) checks your browser and IP address to tell humans from bots. For rate limiting we keep only a scrambled ("salted hash") version of your IP address, not the IP address itself.

We don't ask for your name, payment information or date of birth on the waitlist. Your mobile number is optional, and we only ask for it if you choose to get texts.

3. Why we collect it

We use this information to:

• add you to the waitlist and send the emails you asked for: launch news, beta invites and Yoinkly updates (see §4);
• confirm your email address (double opt-in) and keep a record of your consent;
• understand demand, for example which radars and categories people want, which sub-interests are popular, and which channels and creators bring people in;
• prevent spam, abuse and fake signups, and keep the site working.

We use your country to work out which laws apply to you, which currency to show, and which markets we cover.

We use your mobile number only to send the texts you asked for and to honour opt-outs.

We use your information only for these purposes, unless we ask you first or the law requires otherwise.

4. Consent and emails

We email you only if you tick the consent box and then confirm your email address. Every email we send identifies us, includes our mailing address, and has an unsubscribe link. You can unsubscribe at any time with one click, with no login. We process unsubscribes right away, and always within 10 business days.

Withdrawing consent doesn't affect anything already sent. You can also email Yoinklyofficial@gmail.com to withdraw consent or ask us to delete your information.

5. Service providers and where your data is stored

We don't sell your personal information, and we don't share it for cross-context behavioural advertising. We share it only with service providers that help us run the site and the waitlist, and only for that purpose:

Text messages. We share your number only with our SMS provider (Twilio) to deliver texts. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are never shared with any third party. Our SMS provider may store and process your number outside Canada, e.g. in the United States.

Some of these providers are based in, or store and process data in, the United States or other countries outside Canada. While your information is there, it is subject to the laws of that country, and may be accessible to that country's courts, law enforcement and national security authorities. We use contracts and the providers' own security measures to protect it.

We may also disclose information if the law requires it, or to protect our rights or the safety of others. If Yoinkly is incorporated, or the business is transferred, your information would move to the new owner under this policy.

Creators and partners. If you sign up through a creator's or partner's link, we may tell them how many people signed up through their link. We don't give them your email address or other details unless we ask you first.

6. Cookies and analytics

We use a small number of cookies and similar technologies:

• Analytics (PostHog): first-party cookies that help us count visits and see how the site is used.
• Attribution: a first-party cookie, kept for 30 days, that remembers which link or campaign brought you to the site, so we can credit it if you sign up.
• Security (Cloudflare Turnstile): checks your browser to block bots. This may use cookies or similar browser signals.

We don't use advertising cookies, and we don't let ad networks track you on our site. You can block or delete cookies in your browser settings. If you do, the site and signup will still work, though some security checks may ask you to try again.

Do Not Track. If your browser sends a Do Not Track or Global Privacy Control signal, we don't load our analytics on your visit.

We don't allow other companies to collect information about your activity on our site over time or across other websites, except the service providers listed above, acting for us.

7. How long we keep it

• Unconfirmed signups: if you don't confirm your email, we delete your signup after 30 days.
• Waitlist members: we keep your information while the waitlist is active, until you unsubscribe or ask us to delete it, or until 24 months after the waitlist closes, whichever comes first.
• After you unsubscribe: we keep your email address and the date you unsubscribed on a do-not-email list, so we don't email you again. We also keep your consent record for 3 years in case we need to show we had consent.
• Analytics data: kept for PostHog's standard retention period.
• Texts: If you text STOP, we stop texting you and delete your number from our sending list. We keep your number on a do-not-text list, and keep your consent record for 5 years after opt-out, so we can honour your choice and show we had permission.
• Country: Your country stays on your waitlist record until you leave the waitlist.

8. Your rights

You can ask us to:

• give you access to the personal information we hold about you;
• correct it if it's wrong;
• delete it;
• stop emailing you (or just use the unsubscribe link).

Email Yoinklyofficial@gmail.com. We'll reply within 30 days and may need to confirm your identity first. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca). California residents can use the same process to review and request changes to their information.

9. Children

The waitlist is for people aged 13 and older. We don't knowingly collect personal information from children under 13. If you're under 13, please don't sign up.

Text messages are only for people 18 or older.

If we learn that a child under 13 has given us personal information, we'll delete it. Parents or guardians who think their child signed up can contact Yoinklyofficial@gmail.com. If you're a teenager, please talk to a parent or guardian before signing up.

10. Security

We limit who can access the waitlist data. It's stored with access controls, and it's never readable from the public website. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the Privacy Commissioner as the law requires.

11. Changes to this policy

If we change this policy, we'll post the new version here with a new effective date. If the change is material, for example a new use of your information, we'll also email waitlist members before it takes effect. Where the law requires, we'll ask for your consent again.

12. Contact

• Email: Yoinklyofficial@gmail.com
• Mail: Yoinkly, Attn: Privacy Officer, mailing address available on request